Sawmill 対応ログフォーマット一覧

Sawmill 対応ログフォーマットは以下のとおりです：

最終更新： 2020/7/6

No ログフォーマット

1 3Com 3CRGPOE10075 WAP

2 3Com NBX 100

3 3Com OfficeConnect/WinSyslog

4 3COM TippingPoint

5 3COM TippingPoint IPS 2.5.2

6 3Com TippingPoint SMS

7 4D WebSTAR Common Access

8 4ipnet WHG

9 8e6 Technologies X-Stop

10 A10 Networks AX Series ADC and Server Load Balancer

11 A10 Networks AX Series Authentication

12 AboCom Systems, Inc. VPN Firewall

13 Adiscon EventReporter (v.7)

14 Adiscon EventReporter v.6

15 Adiscon MonitorWare

16 Adiscon MonitorWare (Alternative)

17 Adiscon WinSyslog

18 Adobe ColdFusion Application Server

19 Adobe ColdFusion Application Server (CSV)

20 Adobe ColdFusion Web Server

21 Adobe Flash Media Server

22 Advanced Network Software Host monitor

23 AEP Netilla

24 Akamai HTTP Streaming (W3C)

25 Akamai Web Server Log (W3C)

26 Aladdin eSafe Gateway

27 Aladdin eSafe Sessions

28 Aladdin eSafe Sessions (with URL category)

29 Aladdin eSafe Sessions v5/v6

30 Aladdin Mail Security Gateway

31 Alcatel-Lucent Brick Firewall

32 Alcatel-Lucent VPN Firewall Brick

33 Alt-N Technologies MDaemon 7

34 Alt-N Technologies MDaemon 7 (All)

35 Alt-N Technologies MDaemon 8+

36 Alt-N Technologies MDaemon Routing

37 Amavis Mail Virus Scanner

注記：同一デバイスやアプリケーションであっても、バージョンが異なるとログフォーマットが異なる場合があります。

また、デバイスやアプリケーションでは、ログ出力オプションを指定することができますが、これにより出力

フォーマットが変化します。このため、対応ログフォーマットであっても、正確に解析できない場合があります

（下記ログフォーマット一覧は、お使いのログが正確に解析できることを保証するものではありません）。

ご購入前に 評価版でお試しいただくか、弊社まで対応状況をお問合せください（お問合せいただく際は、 該当の

サンプルログをご提供ください）。

(1/24)

No ログフォーマット

38 Amazon Cloudfront Download

39 Amazon Cloudfront Streaming

40 Amazon S3

41 Amazon Web Services Elasic Load Balancer

42 Apache Custom (Use with your format string)

43 Apache Error

44 Apache Error (syslog required)

45 Apache Mod Gzip

46 Apache NCSA Combined

47 Apache NCSA Combined (NetTracker)

48 Apache NCSA Combined With Cookie Last

49 Apache NCSA Combined With Cookie Last (with JSESSIONID)

50 Apache NCSA Combined With Server Domain After Agent

51 Apache NCSA Combined With Server Domain After Date

52 Apache NCSA Combined With Server Domain After Host

53 Apache NCSA Combined With Server Domain After Size

54 Apache NCSA Combined With Server Domain Before Host

55 Apache NCSA Combined with Syslog

56 Apache NCSA Combined With Visitor Cookie

57 Apache NCSA Combined With WebTrends Cookie

58 Apache SpamAssassin

59 Apache SSL Request

60 Apache Tomcat

61 Apache Tomcat (using Access Log Valve pattern)

62 Apache Tomcat Alt

63 Apple AppleShare IP Manager

64 Apple File Service

65 Apple MacOS X FTP

66 Apple Quicktime Streaming Error

67 Apple Quicktime/Darwin Streaming Server

68 Applied Identity WELF

69 ARBOR Networks eSeries Broadband Traffic Management

70 ArGo Software Design Mail Server

71 ArGo Software Design Mail Server (ddmmyyyy)

72 Argsoft Mail Server

73 Argus Firewall

74 Arm Research Labs Message Sniffer

75 Array Networks APV Application Delivery Controller

76 Array Networks Integrated Web Traffic Manager 500/1000

77 Array Networks SPX 3000 VPN

78 Array Networks SPX 3000 WELF/Squid combined

79 Aruba Networks Aruba Mobility Controllers

80 Aruba Networks Aruba Wireless LAN Switch

81 Ascend Communications

82 ASDS AutoAdmin

83 ASSP Anti-spam SMTP Proxy

84 Astaro Mail Security

85 Astaro Security Gateway

86 Atlassian Confluence

(2/24)

No ログフォーマット

87 Atlassian JIRA

88 Atom Error Log

89 Aurea Savvion BPM

90 Autodesk Network License Manager (Ehanced Reports)

91 Autodesk Network License Manager (FlexLM)

92 Avaya Identify Engines

93 Aventail SSL VPN

94 Aventail Web Access SSL VPN [AAR plug-in 1.6]

95 Balabit IT Security Syslog NG (tab separated)

96 BalaBit IT Security Syslog NG Log (no date in log data; yyyymmdd date in filename)

97 BalaBit IT Security Syslog NG Messages

98 BalaBit IT Security Syslog-NG

99 BalaBit IT Security Syslog-NG (No Time Zone)

100 BalaBit IT Security Syslog-NG (No Year)

101 Barracuda Networks, Inc. Spam Firewall 300

102 Barracuda Networks, Inc. Spam Firewall 400

103 Barracuda Networks, Inc. Spam Firewall 600

104 Barracuda Spyware Filter

105 Barracuda Web Application Firewall

106 Barracuda Web Application Firewall (Access with extended info)

107 Barracuda Web Application Firewall (Access)

108 Barracuda Web Application Firewall (Access) (With Field Header)

109 Barracuda Web Application Firewall (Audit)

110 Barrier Group Firewall

111 Barrier Group Log Format (BETA)

112 Bay Networks Annex Terminal Server

113 BEA Systems WebLogic (diagnostic)

114 BEA Systems WebLogic 8+

115 Bea Systems WebLogic Application Server

116 BEA Systems WebLogic non-extended

117 BEA WebLogic

118 BindView EMS Reporting

119 BindView User Logins

120 Bindview Windows Event Log

121 Biodata BigFire Firewall

122 Biscom Delivery Server (BDS FTP)

123 Bitblock Systems HTTP Access

124 Bitvise WinSSHD

125 Bitvise Winsshd

126 BlackStratus LogStorm Syslog

127 Blue Coat Winproxy 5.1 (yyyy-mm-dd dates)

128 Blue Coat WinProxy Alternate

129 Blue-Canoe MTS Professional

130 Bluecoat Instant Messenger

131 BlueCoat NetCache

132 BlueCoat NetCache 5.5+

133 Bluecoat ProxySG (Alt)

134 Bluecoat ProxySG (Custom)

135 Bluecoat ProxySG 810

(3/24)

No ログフォーマット

136 Bluecoat RealMedia

137 Bluecoat Squid

138 Bluecoat W3C (ELFF)

139 Bluecoat Windows Media

140 Bluesocket Wireless LAN

141 Bomgar Box

142 Borderware Runstats

143 Borderware Security Device

144 BPF BPFT Traflog

145 BPF BPFT4 (with interface)

146 BPF Traffic Daemon (BPFT v.4)

147 BroadVision Error

148 BroadVision Observation

149 BroadWeb BandKeeper

150 BroadWeb BEMS

151 BroadWeb Eulen

152 BroadWeb NetKeeper

153 Broadweb NetKeeper NK3128

154 BroadWeb NH6

155 BroadWeb UTM

156 BroadWeb XKeeper

157 Brocade BigIron Switch

158 Brocade ServerIron Switch

159 BSD NVDCMS

160 BSD tcpdump

161 BSD tcpdump (-tt)

162 BSD tcpdump (-tt, with interface)

163 BSD tcpdump (-tt, with interface) Alternate

164 Bulletproof FTP Server (dd/mm/yy, 24-hour)

165 Bulletproof FTP Server (dd/mm/yyyy)

166 Bulletproof FTP Server (dd/mm/yyyy, 24 hour)

167 Bulletproof FTP Server (mm/dd/yy)

168 Bulletproof FTP Server (mm/dd/yyyy)

169 Bulletproof FTP Server (yyyy/mm/dd)

170 Bulletproof FTP Sessions

171 CA Technologies SiteMinder Apache WebAgent

172 CA Technologies SiteMinder Policy Server

173 CA Technologies SiteMinder Web Acccess Manager

174 CA Technologies SiteMinder WebAgent

175 Canto Cumulus Digital Asset Management

176 CCMedia Webnibbler

177 Cell Technology IPS

178 Cellopoint CelloOS

179 Cellopoint CelloOS crond

180 Cellopoint CelloOS Daemon Syslog Messages

181 Cellopoint Email Firewalll

182 Centricity FirstClass

183 Centricity FirstClass (mmddyyyy)

184 CFT Account

(4/24)

No ログフォーマット

185 Check Point SNMP

186 Check Point Software Technologies Zone Alarm

187 Checkpoint Firewall-1 (fw log export)

188 Checkpoint Firewall-1 (fw log -ftn export)

189 Checkpoint Firewall-1 (logexport)

190 Checkpoint Firewall-1 (loggrabber with syslog)

191 Checkpoint Firewall-1 (loggrabber)

192 Checkpoint Firewall-1 (text export)

193 Checkpoint Firewall-1 Log Viewer 4.1

194 Checkpoint Firewall-1 NG (text export)

195 Checkpoint Firewall-1 NG Full

196 Checkpoint Firewall-1 NG General (text export)

197 Checkpoint Firewall-1 via Syslog

198 Chenziyi Email Catcher

199 CiperTrust Ironmail AV (Sophos)

200 CiperTrust Ironmail CSV

201 CiperTrust Ironmail SMTP Proxy

202 CiperTrust Ironmail SMTPO

203 CiperTrust Ironmail Sophosq

204 CiperTrust Ironmail Spam

205 Cisco eCDS

206 Cisco IOS Debug IP Packet Detailed (Using Syslog Server)

207 Cisco IPS

208 Cisco IronPort IronPort S-Series Access Logs HR Profile for Extended Squid Format

209 Cisco IronPort IronPort S-Series Access Logs Sec Ops Profile for Extended Squid Format

210 Cisco IronPort IronPort S-Series Traffic Monitor Logs v2008-04-03 for WSA v5.1

211 Cisco IronPort IronPort S-Series Traffic Monitor Logs v2008-08-22 for WSA v5.2+

212 Cisco IronPort Web Services Appliance (WSA S-Series) (pseudo-W3C with pattern header)

213 Cisco IronPort Web Services Appliance (WSA S-Series) (W3C)

214 Cisco Linksys Router

215 Cisco LinkSys VPN Router

216 Cisco PIX Firewall Syslog Server

217 Cisco PortSentry

218 Cisco Systems 2960 Switch

219 Cisco Systems 3750 Switch

220 Cisco Systems 4500 Switch

221 Cisco Systems 827 Router (Kiwi, Full Dates, Tabs)

222 Cisco Systems Access Control Server

223 Cisco Systems Access Register

224 Cisco Systems ACNS with SmartFilter

225 Cisco Systems AS5300 Access Server

226 Cisco Systems CE (Content Engine)

227 Cisco Systems CE Common (Content Engine)

228 Cisco Systems Ciscoworks Syslog Server

229 Cisco Systems EMBLEM

230 Cisco Systems IDS/NetRanger

231 Cisco Systems IOS DHCP Server

232 Cisco Systems NetFlow

233 Cisco Systems NetFlow (flow-export)

(5/24)

No ログフォーマット

234 Cisco Systems NetFlow (FlowTools ASCII Export)

235 Cisco Systems NetFlow (nfdump -o long)

236 Cisco Systems NetFlow (no dates)

237 Cisco Systems NetFlow (version 1)

238 Cisco Systems PIX/ASA Security Appliance

239 Cisco Systems Router

240 Cisco Systems Router (No Syslog)

241 Cisco Systems SCA

242 Cisco Systems Secure Server (RAS)

243 Cisco Systems SOHO77

244 Cisco Systems TACACS+ Accounting

245 Cisco Systems Voice Router

246 Cisco Systems VPN Concentrator (Alt)

247 Cisco Systems VPN Concentrator (Comma delimited)

248 Cisco Systems VPN Concentrator (mmddyyyy)

249 Cisco Systems VPN Concentrator Date/Time Header

250 Cisco VPN Concentrator

251 Cisco WAAS TCP Proxy

252 Cisco WAAS TCP Proxy 4.0

253 Cisco WLAN Controller (BETA)

254 Cisco/IronPort Bounce

255 Cisco/IronPort C Series Secure Email

256 Citrix Firewall Manager Syslog

257 Citrix NetScaler

258 Claranet Common Access

259 Clavister Firewall (CSV)

260 Clavister Firewall (with syslog)

261 Clavister SG

262 Clavister SG Series (comma-separated)

263 Clearswift MAILsweeper (24 Hour)

264 Clearswift MAILsweeper (AM/PM)

265 Clearswift MAILSweeper (long)

266 Clearswift MIMEsweeper

267 Clearswift Technologies Websweeper

268 Clickcadence Beatbox Hits

269 Cognos PowerPlay Enterprise Server

270 Cognos Ticket Server

271 CommuniGate Systems Communigate Mail Server

272 CommuniGate Systems CommuniGate Pro

273 Computer Associates ARCserve NT

274 Coradiant Object Tracking

275 Coradiant TrueSight v2.0

276 Courier POP3/IMAP Mail Server

277 CP Secure Content Security Gateway

278 Critical Path Mail Server (POP/IMAP)

279 Critical Path Mail Server (SMTP)

280 CyberGuard Firewall

281 CyberGuard Firewall (WELF)

282 CyberGuard Firewall Audit(non-WELF)

(6/24)

No ログフォーマット

283 D-link DI-804HV Router

284 Dade Behring User

285 Dade Behring User Account (With Duration)

286 DansGuardian Content Filter 2.2

287 DansGuardian Content Filter 2.4

288 DansGuardian Content Filter 2.9

289 Dartware InterMapper Event

290 Dartware InterMapper Outages

291 Dartware InterMapper Outages (ddmmyyyy 24 hr time)

292 Dartware Intermapper Outages (mmmddyyyy, AM/PM)

293 DataEnter XWall

294 Datagram SyslogServer

295 Declude Spam Filter

296 Declude Virus Filter

297 DeepMail IMAP/POP3/SMTP Server

298 Digital Arts i-FILTER

299 Digital Insight Magnet

300 Dorian Event Archiver

301 Dovecot Secure IMAP server

302 Edgecast Networks Media server

303 EDM Web Services Identity

304 eEye Digital Security SecureIIS

305 EIMS SMTP (24 hour)

306 Enterasys Networks Dragon IDS

307 Equiinet Web Filter Log Format 5.5

308 Eridani MailStripper

309 eSafe Mail Security Gateway

310 eSoft Instagate Firewall/VPN

311 Ethereal Packet Analyzer

312 Eutron Planet-Share InterFax

313 Evidian PortalXPert

314 Evostream Media Server

315 Exim Internet Mailer

316 Exim Internet Mailer 4

317 F-Secure HTTP Access

318 F5 FirePass 4100 SSL VPN

319 F5 FirePass SSL VPN (with syslog)

320 F5 Load Balancer

321 F5 Networks Application Security Manager

322 F5 SSL VPN

323 FastHost HTTP Access

324 FedEx Tracking

325 FileMaker FileMaker 3

326 FileMaker FileMaker Access Log

327 FileMaker Web Server

328 FileZilla FTP Server

329 FileZilla FTP Server (m/d/yyyy)

330 FileZilla FTP Server (yyyy-mm-dd)

331 FIS CEB Failed Logins

(7/24)

No ログフォーマット

332 FIS Metavante

333 Fiserv Easy Lender Login Audit

334 Fiserv Easy Lender Login Audit (comma separated)

335 Flowerfire Sawmill Messages

336 Flowerfire Sawmill Tagging Server

337 Fortech, Ltd Proxy Plus

338 Fortinet Firewall (syslog required)

339 Fortinet Fortigate 300 Series

340 Fortinet Fortigate Firewall

341 Fortinet FortiGate Firewall (comma separated)

342 Fortinet Fortigate Firewall (space separated)

343 Fortinet Fortigate Traffic

344 Fortinet FortiMail

345 Fortinet FortiMail

346 Forum Systems XWall

347 Foundry Networks BigIron Switch

348 Foundry Networks ServerIron Switch

349 Franz Krainer SL4NT

350 Franz Krainer SL4NT (dd.mm.yyyy, commas without spaces)

351 Franz Krainer SL4NT (dd/mm/yyyy)

352 Franz Krainer slnt4

353 FreeBSD IPFW

354 FreeBSD Minirsyslogd

355 FreeBSD praudit

356 Fujitsu Si-R

357 Funkwerk Bintec VPN Access

358 Gene6 G6 FTP Server (dd/mm/yy, 24-hour)

359 Gene6 G6 FTP Server (dd/mm/yyyy)

360 Gene6 G6 FTP Server (dd/mm/yyyy, 24 hour)

361 Gene6 G6 FTP Server (mm/dd/yy)

362 Gene6 G6 FTP Server (mm/dd/yyyy)

363 Gene6 G6 FTP Server (yyyy/mm/dd)

364 Gene6 G6 FTP Sessions

365 Gene6 SARL FTP Server

366 Gene6 SARL FTP Server (W3C)

367 Generex UPS WEB/SNMP Manager

368 Generic Complete Syslog Messages (report full syslog message in one field)

369 Generic CSV (Comma-Separated Values)

370 Generic MM/DD-HH:MM:SS Timestamp Syslog Server

371 Generic Network Syslog

372 Generic Seconds since Jan 1 1970 Timestamp Syslog

373 Generic SNMP Manager

374 Generic Socks 5

375 Generic Timestamp (mm dd hh:mm:ss)

376 Generic User Activity Tracking

377 Generic W3C Web Server

378 Generic WAP Error

379 GFI MailEssentials

380 GFI MailEssentials Spam Filter

(8/24)

No ログフォーマット

381 GFI MailSecurity Attachment & Content Filter

382 Global Technology Associates GNAT Box (sylog required)

383 Global Technology Associates GNAT Box Syslogger

384 Globalscape EFT

385 GNU Event Log to Syslog

386 GNU FreeRADIUS

387 GNU General Public License NTsyslog

388 GNU IP Traffic LAN Statistics

389 GNU ipchains

390 GNU IPTraf

391 GNU IPTraf TCP/UDP Services

392 GNU Mailer Daemon

393 GNU Mailman Post

394 GNU Mailman Subscribe

395 GNU Passlogd

396 GNU Passlogd Syslog (Full Messages)

397 GNU Privoxy

398 GNU ProFTP

399 GNU PureFTP

400 GNU PureFTP (Syslog)

401 GNU Samba

402 GNU Shorewall

403 GNU SmoothWall

404 GNU Squid Common

405 GNU Squid Common - Syslog Required

406 GNU Squid Event

407 GNU Squid With Full Headers

408 GNU Squid with ncsa_auth Package

409 GNU XMail SMTP Server

410 GNU XMail Spam

411 GNU/Linux Netstat

412 Google HTTP Access

413 Gordano Messaging Suite POP

414 Gordano Messaging System Post

415 Gordano Messaging System SMTP

416 Greatstone activePDF

417 GTA GB Firewall WELF (sylog required)

418 GTA Gnatbox GB-Ware

419 GTB Inspector

420 Hand-Crafted Software FreeProxy

421 HCTech Guardix

422 Help/Systems InterMapper Chart

423 Hewlett Packard Audit Log

424 hMailServer - www.hmailserver.com SMTP Mail Server

425 Hosting.com Access

426 HP Netstat

427 HP TippingPoint

428 HP TippingPoint IPS 2.5.3

429 HP TippingPoint SMS

(9/24)

No ログフォーマット

430 Hyperion Essbase

431 IBM AIX

432 IBM AIX CPU Utilization

433 IBM Cognos PowerPlay Enterprise Server

434 IBM Cognos Ticket Server

435 IBM Domino Access

436 IBM Domino Agent

437 IBM Domino Error

438 IBM Domino Referrer

439 IBM HTTP Server

440 IBM HTTP Server Common

441 IBM Internet Security Systems Network Sensors

442 IBM RACF Security

443 IBM Tivoli Access Manager

444 IBM Tivoli Access Manager WebSEAL

445 IBM Tivoli NetView

446 IBM Tivoli Storage Manager TDP for SQL Server

447 IBM WebSEAL Audit

448 IBM WebSEAL Authorization (XML)

449 IBM WebSEAL CDAS

450 IBM WebSEAL Error

451 IBM WebSEAL Request

452 IBM WebSEAL Request With User Agent

453 IBM WebSEAL Security Manager

454 IBM WebSEAL Wand Audit

455 IBM WebSEAL Warning

456 IBM WebSphere Message Broker

457 ICAP Internet Content Adaptation Protocol

458 Icecast Playlist

459 Imperva WAF

460 InfiNet Firewall

461 Infoblox DNSone DHCP

462 Ingate Firewall

463 INN News

464 INN News (Alternate)

465 Instagate Syslog Format

466 Intel NetStructure VPN Gateway

467 Internet Security Systems Firewall

468 Internet Systems Consortium BIND (Berkeley Internet Name Domain)

469 InterSafe HTTP Content Filter

470 InterScan VirusWall

471 Intersect Alliance Snare

472 InterSect Alliance SNARE Epilog Collected Oracle Listener

473 InterSect Alliance Snare for AIX

474 IPCop IDS Snort (multiline)

475 IPCop Syslog Server

476 iPlanet Netscape Directory Server

477 iPolicy Networks ipEnforcer

478 Ipswitch IMail

(10/24)

No ログフォーマット

479 Ipswitch IMail Server

480 Ipswitch Imail Server Alternate

481 Ipswitch Imail Syslog Header

482 Ipswitch MOVEit DMZ

483 Ipswitch MOVEit DMZ SSH

484 Ipswitch Whatsup Syslog

485 Ipswitch WS_FTP

486 Ipswitch WS_FTP (XML)

487 IronMail IronMail (showevents export)

488 IronPort Bounce

489 IronPort C Series Secure Email

490 IronPort Web Security Appliance (WSA S-Series) (CSV Export)

491 ISC Bind Query DNS Server

492 ISC Bind Query DNS Server (with timestamp)

493 ISC Bind Response Checks

494 ISC Bind Security

495 ISC Bind9 Query DNS Server

496 ISC Bind9 Query DNS Server (with timestamp)

497 ISC Bind9 Update (with timestamp)

498 ISC DHCP

499 ISC DHCP Leases

500 IWI CWAT

501 Jarle Aase War FTP Daemon

502 Jarle Aase War FTP Daemon (Alternate)

503 Jataayu Carrier WAP Server

504 JBoss (Red Hat) Application Server

505 JH Software Simple DNS

506 Jive Software OpenFire IM

507 JP-Secure SiteGuard

508 JTC eSafe Sessions (with URL category)

509 Juniper IDP

510 Juniper Media Flow Controller (Access Logs) (NCSA)

511 Juniper Media Flow Controller (Access Logs) (W3C)

512 Juniper Media Flow Controller Access (2_0_9_Apple_MFC variant, 2012-07-21)

513 Juniper Media Flow Controller Access (Apple variant, 2012-07-21)

514 Juniper NetScreen SSG

515 Juniper Networks Neoteris

516 Juniper Networks NetScreen IDP

517 Juniper Networks Netscreen SSL Gateway

518 Juniper Networks NetScreen Traffic

519 Juniper Networks NetScreen Traffic (get log traffic)

520 Juniper Networks Netscreen Web Client Export

521 Juniper Networks NetScreen-204

522 Juniper Networks Netscreen-25

523 Juniper Networks Secure Access 4000

524 Juniper Networks Secure Access 6000

525 Juniper Networks Steel Belted Radius ACT

526 Juniper SA-2500

527 Juniper SRX240

(11/24)

No ログフォーマット

528 Juniper SRX3400

529 Juniper SSL VPN

530 Kaspersky Labs AVP Client (Spanish)

531 Kaspersky Labs AVP Server (Spanish)

532 Kaspersky Labs Mail Server

533 Kaspersky Labs Mail Server for Linux

534 KEIKO PLAN-N Access Control Software

535 Kerio Connect

536 Kerio Control (Security)

537 Kerio Control Firewall

538 Kerio Mail Server

539 Kerio Network Monitor

540 Kerio Network Monitor HTTP

541 Kerio WebSTAR

542 Kerio WebSTAR Common Access

543 Kerio WebSTAR FTP

544 Kerio WebSTAR Proxy

545 Kerio WebSTAR W3C Web Server

546 Kerio WinRoute Connection

547 Kerio Winroute Firewall

548 Kerio WinRoute Mail

549 Kerio WinRoute Web

550 Kernun DNS Proxy

551 Kernun HTTP Proxy

552 Kernun Proxy

553 Kernun SMTP Proxy

554 Kingdon, Inc. Kingdon Firewall

555 Kiwi (mm-dd-yy dates, with type and protocol)

556 Kiwi (mmm/dd dates, hh:hh:ss.mmm UTC times)

557 Kiwi CatTools CatOS Port Usage

558 Kiwi Syslog (dd-mm-yyyy dates)

559 Kiwi Syslog (ISO/Sawmill)

560 Kiwi Syslog (ISO/Sawmill) for EventSentry

561 Kiwi Syslog (Logged to Access MDB, then exported tab-separated)

562 Kiwi Syslog (Space-separated YYYY/MM/DD)

563 Kiwi Syslog (UTC)

564 Kiwi Syslog (yyyy/m/d hh:mm, tab separated)

565 Kiwi Syslog (YYYYMMDD Comma)

566 Kiwi Syslog Daemon (mm-dd-yyyy dates)

567 KS-Soft Host Monitor

568 L-Soft LSMTP

569 L-Soft LISTSERV

570 L-Soft LSMTP Access

571 Lancom Systems Router

572 Lava Soft Lava2 Firewall

573 Limelight Networks Flash Media Server

574 Limelight SHOUTcast Service

575 Livingston Radius Accounting

576 Livingston Radius Accounting II

(12/24)

No ログフォーマット

577 Livingston Radius ACT

578 Logika FusionBot

579 LogSat Spam Filter

580 Lotus Notes

581 Lotus Notes Domino Access

582 Lotus Notes Domino Agent

583 Lotus Notes Domino Error

584 Lotus Notes Domino Referrer

585 LRS VPSX Accounting

586 LUNA Insight Media Manager Service

587 Lyris MailShield

588 M86 Security 8e6 Web filter

589 M86 Security X-Stop

590 Macromedia Flash Media Server

591 Macromedia Flex/JRun

592 MailEnable W3C Mail Server

593 MailScanner

594 MailScanner Syslog Required

595 MailScanner Virus

596 Marshal8e6 8e6 Web Filter

597 Maxum Development Rumpus FTP

598 Maxum Development Rumpus HTTP

599 McAfee E1000 Mail Scanner

600 McAfee Email Gateway

601 McAfee Email Security Appliance

602 McAfee Gauntlet Firewall

603 McAfee Gauntlet Firewall (yyyymmdd)

604 McAfee IntruShield Alert

605 McAfee Ironmail AV (Sophos)

606 McAfee Ironmail CSV

607 McAfee Ironmail SMTP Proxy

608 McAfee Ironmail SMTPO

609 McAfee Ironmail Sophosq

610 McAfee Ironmail Spam

611 McAfee Secure Messaging Gateway (SMG) VPN Firewall

612 McAfee Web Gateway

613 McAfee Webshield

614 McAfee Webshield XML

615 McAfee WebWasher

616 Merak POP/IMAP Server

617 Merak SMTP Server

618 Metavante

619 Metavante CEB Failed Logins

620 Microsoft 2012 R2 Server (CSV)

621 Microsoft DNS Server

622 Microsoft DNS Server

623 Microsoft dumpel.exe

624 Microsoft Elogdmp (CSV)

625 Microsoft Event Log Query

(13/24)

No ログフォーマット

626 Microsoft Exchange 2007 (via syslog)

627 Microsoft Exchange Internet Mail

628 Microsoft Exchange Server

629 Microsoft Exchange Server (W3C)

630 Microsoft Exchange Server 2000 (CSV)

631 Microsoft Exchange Server 2000/2003

632 Microsoft Exchange Server 2000/2003

633 Microsoft Exchange Server 2007/2010

634 Microsoft Exchange Server 2013

635 Microsoft Exchange Server 2013 Connectivity Log

636 Microsoft Forefront Threat Management Gateway

637 Microsoft Forefront Threat Management Gateway (Tab-separated)

638 Microsoft IAS (XML)

639 Microsoft IAS Alternate

640 Microsoft IAS Comma-Separated

641 Microsoft IAS/NPS

642 Microsoft ICF (Internet Connection Firewall)

643 Microsoft IIS

644 Microsoft IIS (dd/mm/yy)

645 Microsoft IIS (dd/mm/yyyy)

646 Microsoft IIS (mm/dd/yyyy dates)

647 Microsoft IIS (ODBC log source)

648 Microsoft IIS (with syslog)

649 Microsoft IIS (yy/mm/dd)

650 Microsoft IIS Advanced Logging Module

651 Microsoft IIS Extended

652 Microsoft IIS Extended (W3C)

653 Microsoft IIS FTP Server

654 Microsoft IIS SMTP (Comma Separated)

655 Microsoft IIS SMTP Common

656 Microsoft IIS SMTP W3C

657 Microsoft ISA 2004 CSV

658 Microsoft ISA Server

659 Microsoft ISA Server Packet

660 Microsoft ISA WebProxy (ODBC log source)

661 Microsoft ISA WebProxy (CSV)

662 Microsoft Media Server

663 Microsoft MPS

664 Microsoft Netstat

665 Microsoft Performance Monitor

666 Microsoft Port Reporter

667 Microsoft Provisioning System

668 Microsoft Proxy

669 Microsoft Proxy (Bytes Received Field Before Bytes Sent)

670 Microsoft Proxy (d/m/yy)

671 Microsoft Proxy (d/m/yyyy)

672 Microsoft Proxy (m/d/yyyy)

673 Microsoft Proxy Packet Filtering

674 Microsoft PSLogList

(14/24)

No ログフォーマット

675 Microsoft Server NPS SQL (ODBC Log Source)

676 Microsoft SharePoint Server

677 Microsoft SQL Profiler 2005 Export with DB/Host

678 Microsoft SQL Profiler Export

679 Microsoft TFS MailReport Extended

680 Microsoft URL-Scan (W3C)

681 Microsoft URLScan

682 Microsoft Window Azure

683 Microsoft Windows (Server 2008/Vista) Event Log (CSV Export, m/d/yyyy dates)

684 Microsoft Windows 2000/XP Event (export list-CSV) ddmmyyyy

685 Microsoft Windows 2000/XP Event (save as-CSV) dd/mm/yyyy

686 Microsoft Windows 2000/XP/2003 Eventlog via Syslog

687 Microsoft Windows 7/2008 Eventlog via Syslog

688 Microsoft Windows DHCP Server

689 Microsoft Windows DHCP Server

690 Microsoft Windows Firewall

691 Microsoft Windows NT Scheduler

692 Microsoft Windows NT Syslog

693 Microsoft Windows NT4 Event (save as CSV)

694 Microsoft Windows Performance Monitor

695 Microsoft Windows Syslog

696 Microsoft Windows XP Event Log (LogParser CSV Export)

697 Microtech ImageMaker

698 Microtech ImageMaker

699 MikroTik Router

700 MikroTik The Dude

701 MikroTik Web Proxy

702 Mirapoint Message Server

703 Mirapoint SMTP

704 Mitsubishi msieser HTTP

705 Mitsubishi msieser SMTP

706 Miva Merchant Access

707 Miva Merchant Combined Access

708 Motorola Netopia 4553

709 N2H2

710 N2H2 Novell Border Manager

711 N2H2 Sentian

712 N2H2 SmartFilter (Bess Edition)

713 Nagios

714 NcFTP (Alternate)

715 NCR Netkey

716 NCSA Combined Proxy

717 NCSA Common Access

718 NCSA Common Access with full URLs

719 NCSA Common Agent

720 NCSA Common Error

721 NCSA Common Proxy

722 NCSA Common Referrer

723 NEMX PowerTools for Exchange

(15/24)

No ログフォーマット

724 Net-Wall

725 Netal SL4NT (yyyy mmm dd)

726 NetApp Filers Audit

727 NetApp NetCache

728 NetApp NetCache 5.5+

729 NetContinuum Application Security Gateway

730 Netegrity SiteMinder Access

731 Netegrity SiteMinder Event

732 Netfilter IPtables

733 Netfilter IPtables Configuration

734 NetForensics Syslog

735 Netgear DG834G

736 Netgear Firewall

737 Netgear FR328S

738 Netgear FVL328 (logging to syslog)

739 Netgear FVS318

740 Netgear FVS318 With Syslog

741 NETGEAR ProSecure

742 Netgear RAIDiator Error

743 Netgear Security

744 Netgear Security (logging to syslog)

745 Netkey

746 NetSafe eSafe Sessions v5/v6

747 Netscape iPlanet

748 Netscape Messenger 4.0

749 Netscape Netscape Directory Server

750 Netscape Netscape Extended

751 Netscreen Neoteris SSL Web Client Export

752 NetScreen Traffic

753 Neustar Webmetrics

754 Nginx Nginx (using log_format)

755 Nmap Security Scanner

756 nnSoft nnBackup

757 No Syslog Header (use today's date, or use date/time from message)

758 Nokia IP350/Checkpoint NG

759 Norstar PRELUDE and CINPHONY ADC

760 Nortel Annex Terminal Server

761 Nortel Contivity (VPN Router/Firewall)

762 Nortel Meridian 1 Automatic Call Distribution (ACD)

763 Nortel Networks Instant Internet

764 Nortel SSL VPN

765 Novell Border Manager (W3C)

766 Novell Border Manager 3.8

767 Novell GroupWise Internet Agent Accounting (2-digit years)

768 Novell GroupWise Internet Agent Accounting (4-digit years)

769 Novell GroupWise Post Office Agent

770 Novell GroupWise Web Access (dd/mm/yy)

771 Novell Groupwise Web Access (mm/dd/yy)

772 Novell GW Guardian Anti-Spam

(16/24)

No ログフォーマット

773 Novell GW Guardian Antivirus

774 Novell iChain (W3C Extended)

775 Novell iChain (W3C)

776 Novell NetMail

777 NPR Digital Services IceCast Reporting

778 Nullsoft SHOUTcast Media Server / DNAS (Distributed Network Audio Server)

779 Nullsoft SHOUTcast Media Server / DNAS (Distributed Network Audio Server) (W3C)

780 NuSpectra SiteCAM

781 O'Reilly Web Access

782 O2 Micro Succendo SSL VPN

783 OCLC EZproxy

784 OCLC EZproxy Custom (Use with your LogFormat string)

785 Office Efficiencies SafeSquid

786 Office Efficiencies SafeSquid (Extended Logging)

787 Office Efficiencies SafeSquid (Orange)

788 Office Efficiencies SafeSquid Standalone

789 Open Door Networks ShareWay IP

790 Open Source UNIX FTP

791 Open Source Unix Syslog

792 Open Source Unix Syslog With Year

793 Open Text FirstClass server

794 Open WebMail

795 OpenBSD Packet Filter Firewall (tcpdump -neqttr)

796 OpenBSD spamd (SpamAssassin Daemon)

797 Openfind Mail2000

798 openldap Log Format (BETA)

799 OpenSight Software FlashFXP

800 OpenVPN technologies OpenVPN

801 OpenVPN technologies OpenVPN Header

802 Openwave Systems Intermail

803 Optenet WebFilter

804 Optima Transaction Log

805 Oracle Application Server (Java Exceptions)

806 Oracle BEA WebLogic 8+

807 Oracle Database Audit

808 Oracle Essbase

809 Oracle Express Authentication

810 Oracle Failed Login Attempts

811 Oracle iPlanet Error

812 Oracle iPlanet Messaging Server

813 Oracle Java Administration MBEAN

814 Oracle Java Bean Application Serve

815 Oracle Listener

816 Oracle Policy Directory Audit

817 Oracle Policy Directory Security Audit Trail

818 Oracle Sun ONE Directory Server

819 Oracle Sun ONE Directory Server Audit

820 Oracle Sun ONE Directory Server Error

821 Oracle WebLogic

(17/24)

No ログフォーマット

822 Oracle WebLogic (diagnostic)

823 Oracle WebLogic (W3C)

824 Ositis Winproxy

825 Ositis Winproxy (2-digit years)

826 Ositis Winproxy Common

827 OSSEC Alert Log

828 OSSEC Checkpoint

829 Packet Dynamics W3C Log Export

830 Palo Alto Networks Firewall (Integrated Threat & Traffic)

831 Palo Alto Networks Firewall (Threat)

832 Palo Alto Networks Firewall (Traffic)

833 Paloalto Firewall(CEF)

834 Parallels Plesk Server Administrator

835 PeopleSoft AppServer

836 Persits Software AspEmail

837 PHP Error

838 Piolink Network Loadbalance

839 Postfix mail server

840 PostWorks IMAP Server

841 PostWorks POP3 Server

842 PostWorks SMTP Server

843 PROVISIO GmbH SiteKiosk

844 Provisio SiteKiosk

845 Provos honeyd

846 Prrdeikes Welcome

847 Psionic Technologies PortSentry

848 QBIK WinGate

849 Qbik WinGate Proxy (no Traffic lines, dd/mm/yy dates)

850 Qbik WinGate Proxy (no Traffic lines, mm/dd/yy dates)

851 Qbik WinGate Proxy (with Traffic lines)

852 Qmail Scanner

853 Qmail Scanner (Syslog Required)

854 Qmail Scanner (TAI64N dates)

855 Qualcomm EIMS Error

856 Qualcomm EIMS SMTP (12 hour)

857 Qualcomm Internet Mail Server 3.2

858 Radvision Click to Meet

859 Radware DefensePro

860 Radware Linkproof OnDemand Switch

861 Radware Load Balancing (Using Syslog Server)

862 Raiden FTP Server

863 Raiden MAILD

864 Real Helix Universal Proxy

865 Real Networks Helix Server

866 Real Networks Helix Server Style 5

867 Real Networks Helix Session Manager

868 RealNetworks RealProxy

869 RealNetworks RealServer

870 RealNetworks RealServer Alternate

(18/24)

No ログフォーマット

871 RealNetworks RealServer Error

872 Redcreek System Message Viewer

873 RedHat Linux Auth

874 RedHat Linux crond

875 RedHat Netstat

876 RedHat RedHat Linux Daemon Syslog Messages

877 RedHat syslogd

878 RedHat syslogd (dd/mm/yyyy:hh:mm:ss prefix)

879 Retrospect

880 Rhino Software Serv-U FTP Server

881 RSA SecurID Audit Admin

882 RSA SecurID Audit Runtime

883 Ruby

884 SafeNet eSafe Gateway

885 SafeNet eSafe Sessions

886 SafeNet eSafe Sessions (with URL category)

887 SafeNet eSafe Sessions (with URL category)

888 Sambar Server

889 SAS Firewall

890 Sawmill Analytics WU-FTP

891 Sawmill Task Log

892 Sawmill Unified Media

893 SchedMD SLURM

894 SDSU htdig

895 Secure Computing Corporation Secure Firewall (Sidewinder)

896 Secure Computing Ironmail AV (Sophos)

897 Secure Computing Ironmail CSV

898 Secure Computing Ironmail SMTP Proxy

899 Secure Computing Ironmail SMTPO

900 Secure Computing Ironmail Sophosq

901 Secure Computing Ironmail Spam

902 Secure Computing Sidewinder

903 Secure Computing Sidewinder Syslog

904 Secure Computing SmartFilter (Bess Edition)

905 Secure Computing WebWasher

906 Sendmail (Syslog Required)

907 Sendmail For NT

908 Sendmail No Syslog

909 Sentman WhistleBlower

910 Sentman WhistleBlower Performance Metrics

911 Separ URL Filter

912 Shalla Secure Services squidGuard

913 Sharetech / Abocom Firewall

914 SmarterTools SmarterMail

915 Smartmax MailMax SE Mail

916 SmartMax MailMax SE SMTP

917 SmartMax POP

918 SmartMax SMTP

919 Smoothwall Network Guardian and Advanced Firewall

(19/24)

No ログフォーマット

920 SmoothWall SmoothGuardian 3.1

921 SnmpSoft Syslog Watcher

922 SocketLabs Hurricane MTA

923 SoftArc FirstClass server

924 Software602

925 SolarWinds (mmm/dd dates, hh:hh:ss.mmm UTC times)

926 SolarWinds IPMon (Using Syslog Server)

927 Solarwinds Kiwi (mm-dd-yy dates, with type and protocol)

928 SolarWinds Kiwi CatTools CatOS Port Usage

929 Solarwinds Kiwi Syslog (dd-mm-yyyy dates)

930 Solarwinds Kiwi Syslog (ISO/Sawmill)

931 Solarwinds Kiwi Syslog (ISO/Sawmill) for EventSentry

932 SolarWinds Syslog (Space-separated YYYY/MM/DD)

933 SolarWinds Syslog (UTC)

934 SolarWinds Syslog (yyyy/m/d hh:mm, tab separated)

935 SolarWinds Syslog (YYYYMMDD Comma)

936 SolarWinds Syslog Daemon (mm-dd-yyyy dates)

937 SolarWinds Syslog Server

938 SonicWALL Aventail Client/server Access

939 SonicWall Aventail SSL VPN

940 SonicWALL Aventail XML Report

941 SonicWall NSA (Network Security Appliance)

942 SonicWall SonicWall or 3COM Firewall

943 SonicWall TZ 170 Firewall

944 SonicWall Version 5

945 SonicWall Web Access SSL VPN [AAR plug-in 1.6]

946 Sophos Antispam Message

947 Sophos Antispam PMX

948 Sophos Mail Monitor for SMTP

949 Sophos UTM Web Application Firewall

950 Sophos Web Appliance

951 Sourcefire ClamAV

952 Sourcefire Defense Center

953 Sourcefire IDS

954 Sourcefire Snort (standalone, mm/dd dates)

955 Sourcefire Snort (standalone, mm/dd/yy dates)

956 Sourcefire Snort (syslog required)

957 Sourcefire Snort 2 (syslog required)

958 Sourcefire SNORT Portscan

959 Squarespace

960 SquareSpace Tomcat Tomsquare

961 Squid Proxy server

962 Squid Web cache daemon

963 SquidGuard Plugin for Squid

964 St. Bernard Software iPrism (with syslog)

965 St. Bernard Software iPrism Monitor

966 St. Bernard Software iPrism-RT

967 Stairways NetPresenz

968 Stairways NetPresenz (24-hour times, d/m/y dates)

(20/24)

No ログフォーマット

969 Stairways NetPresenz (d/m/y dates)

970 Steven Young and Robert James Kaes tinyproxy

971 Stonesoft StoneGate Firewall

972 Sun Microsystems Java Bean Application Serve

973 Sun Microsystems log4j (with your format string)

974 Sun Microsystems SIMS (Sun Internet Mail Server)

975 Sun Microsystems Sun ONE Directory Server

976 Sun Microsystems Sun ONE Directory Server Audit

977 Sun Microsystems Sun ONE Directory Server Error

978 Sun Solaris Auth

979 Sun Solaris Daemon Syslog Messages

980 Sun-Netscape iPlanet Messenger Server 5

981 SuperLumin Networks Nemesis

982 Sybase Error Log

983 Symantec Antivirus

984 Symantec AntiVirus Corporate Edition

985 Symantec AntiVirus Corporate Edition (VHIST Exporter)

986 Symantec Backup Exec

987 Symantec Brightmail Gateway

988 Symantec Brightmail Gateway (via syslog)

989 Symantec Enterprise Firewall

990 Symantec Enterprise Firewall 8

991 Symantec Gateway Security

992 Symantec Gateway Security (via syslog)

993 Symantec Gateway Security 2 (CSV)

994 Symantec Gateway Security 400 Series

995 Symantec Mail Security

996 Symantec Mail Security Syslog

997 Symantec Norton Personal Firewall 2003 Connection

998 Symantec Raptor (Exception Reporting)

999 Symantec Raptor Firewall

1000 Symantec System Console

1001 Symantec Web Security

1002 Symantec Web Security CSV

1003 SyrReset Mirc

1004 Sysgenic Group Proxy-Pro GateKeeper

1005 Syslog Syslog (yyyymmdd hhmmss)

1006 TACACS+ Accounting Log Format (BETA)

1007 Tellique

1008 Tenable Nessus

1009 Tenon Intersystems Post Office Mail Server

1010 TerraPlay Accounting

1011 The Fedora Project Fedora Linux Daemon Syslog Messages

1012 The Fedora Project Linux

1013 The Fedora Project Linux crond

1014 Tinline Know-how

1015 Tiny Software Personal Firewall

1016 TippingPoint

1017 TippingPoint Technologies TippingPoint IPS 2.5.1

(21/24)

No ログフォーマット

1018 TippingPoint Technologies TippingPoint SMS

1019 Trend Micro Control Manager

1020 Trend Micro Control Manager 2014

1021 Trend Micro Deep Security

1022 Trend Micro eManager Spam Filter

1023 Trend Micro Interscan VirusWall

1024 Trend Micro InterScan Viruswall

1025 Trend Micro InterScan Web Security Suite Access

1026 Trend Micro Interscan WebManager

1027 Trend Micro IWSVA

1028 Trend Micro ScanMail For Exchange

1029 Trend Micro ServerProtect CSV Admin

1030 Trend Micro Trend Micro InterScan Messaging Security Suite (IMSS) eManager

1031 TrendMicro Interscan E-mail

1032 TrendMicro Interscan Email VirusWall

1033 TrendMicro Interscan Messaging Security Suite

1034 TrendMicro Interscan Messaging Security Suite (emanager)

1035 TrendMicro Interscan Messaging Security Suite (Integrated)

1036 TrendMicro Interscan Messaging Security Suite (virus)

1037 TrendMicro Interscan Proxy (mm/dd/yyyy)

1038 TrendMicro Interscan Proxy (dd/mm/yyyy)

1039 TrendMicro Interscan Web Security Suite

1040 TrendMicro ScanMail for Exchange

1041 Ulrich Callmeier Network log daemon

1042 Unicomp Guinevere

1043 Unicomp Guinevere Virus

1044 University of Wisconsin UW-IMAP

1045 Unix du Disk Tracking

1046 UNIX sudo

1047 Unknown Publisher IST

1048 Unknown Publisher Rapid Firewall

1049 Unreal Streaming Technologies Unreal Media Server

1050 Useful Utilities EZproxy

1051 UTM Firewall

1052 UUDynamics SSL VPN

1053 Vamsoft Open Relay Filter Enterprise Edition

1054 Vasco iKey Server

1055 VBrick EtherneTV Portal Server

1056 Veritas Backup Exec

1057 Vicomsoft Gateway

1058 Vicomsoft Internet Gateway

1059 Vidyo CDR

1060 Vircom Mail Server

1061 Visonys Airlock

1062 vsftpd

1063 WallWatcher Firewall

1064 Washington University WU-FTP

1065 Washington University WU-FTP (yyyy-mm-dd Dates, Server Domain)

1066 WatchGuard Borderware Security Device

(22/24)

No ログフォーマット

1067 WatchGuard Firebox

1068 Watchguard Firebox

1069 Watchguard Firebox (Cluster Traffic)

1070 Watchguard Firebox Export

1071 Watchguard Firebox Export (m/d/y)

1072 Watchguard Firebox Export Header

1073 Watchguard Firebox Export Header (dd/mm/yy dates)

1074 Watchguard Firebox Export Header (mm/dd/yy dates)

1075 Watchguard Firebox v60

1076 Watchguard Firebox V60 Syslog required

1077 Watchguard Firebox X Core e-Series

1078 Watchguard Firebox XML

1079 Watchguard Firebox XTM

1080 Watchguard Historical Reports Export

1081 Watchguard SOHO

1082 Watchguard WELF

1083 Watchguard WSEP Text Exports (Firebox II & III & X)

1084 Websense

1085 Websense

1086 Websense Vidius Combined

1087 Websense Websense Server

1088 WebSTAR Proxy

1089 Webtrends Extended

1090 Webtrends firewall

1091 Webtrends Syslog for Firewalls and VPNs

1092 Webtrends WELF date/time extraction (no syslog header)

1093 WebTrends WELF Stand-alone (no syslog)

1094 Who's Clicking Who

1095 Wipro Websecure Audit

1096 Wipro Websecure Auth

1097 Wipro Websecure Auth (Alternate Dates)

1098 Wipro Websecure Debug

1099 Wireshark Packet Analyzer

1100 Woodstone Servers Alive

1101 Woodstone Servers Alive (Statistics)

1102 Wowza Media Systems Wowza Media Server

1103 Wowza Media Systems Wowza Streaming Engine

1104 Xiph Foundation Icecast

1105 Xiph Foundation Icecast (Alternate)

1106 Xtera AscenLink

1107 Xylogics Annex Terminal Server

1108 Yamaha RTX

1109 Youngzsoft CCProxy

1110 Zentyal Linux Small Business Server

1111 Zentyal Unix Syslog

1112 Zeus Technologies Zeus Web Server Extended

1113 Zeus Technology Zeus Web Server (Alternate Dates)

1114 Zimbra Collaboration Mail Server

1115 ZyXEL Communications

(23/24)

No ログフォーマット

1116 Zyxel Communications Zywall Firewall WELF

1117 Zyxel Communications Zyxel Firewall (Syslog Required)

(24/24)